04.08.25

2025-08-04 18:24:30 +10:00
commit 9c9e8f09da
22 changed files with 533 additions and 0 deletions
--- a/roles/firewall/tasks/main.yml
+++ b/roles/firewall/tasks/main.yml
@@ -0,0 +1,23 @@
+- name: Install ufw
+  apt:
+    name: ufw
+    state: present
+
+- name: Allow SSH
+  ufw:
+    rule: allow
+    port: 22
+
+- name: Allow HTTP/HTTPS
+  ufw:
+    rule: allow
+    port: "{{ item }}"
+  loop:
+    - 80
+    - 443
+
+- name: Deny all others
+  ufw:
+    state: enabled
+    policy: deny
+